<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hi Rob,<div><br></div><div>I think minimally filing an issue in <a href="https://github.com/cabforum/smime/issues">https://github.com/cabforum/smime/issues</a> would be a good thing to do to track this potential conflict.</div><div>FWIW, I also think the issue identified is indeed an issue (though probably not major) and your proposed updates seem reasonable to me as well.</div><div><br></div><div>Cheers,</div><div>-Clint<br><div><br><blockquote type="cite"><div>On Jul 13, 2023, at 6:52 AM, Robert Lee via Smcwg-public <smcwg-public@cabforum.org> wrote:</div><br class="Apple-interchange-newline"><div><meta charset="UTF-8"><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">Dear all,<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">I’m emailing because I think some further clarification may be needed in section 7.1.4.2.2(a) around commonNames as Personal Names or Pseudonyms (capital ‘P’ based on SMC03 changes).<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">What I think is needed is to align some of the uses of commonNames with the existing rules around if subject:pseudonym is present then subject:givenName/subject:surname SHALL NOT be present and the vice versa rule. My understanding/assumption is that the pseudonym/givenName/surname rules are in place to make an SMIME certificate a Pseudonym cert or a Personal Name cert and not to be both at the same time (especially as putting one’s name into the cert would dramatically reduce any privacy afforded by using a Pseudonym).<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">However, the options for commonName in sponsor and individual validated certificates don't entirely work with the above as currently you _<i>could</i>_ have a subject:pseudonym and then put your Personal Name in the commonName which doesn't track with my understanding/assumption of what the pseudonym/givenName/surname rules are supposed to achieve.<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">I don’t think it’s a difficult thing to fix though. Adding the following lines to 7.1.4.2.2(a) should close this hole effectively enough:<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">“If the subject:commonName contains a Pseudonym, then the subject:givenName and/or subject:surname attributes SHALL NOT be present.”<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">“If the subject:commonName contains a Personal Name, then the subject:pseudonym attribute SHALL NOT be present.”<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">If people broadly agree with my suggestion then I’m happy to make a PR into the BRs or somewhere else if, like SMC03, there’ll be a branch collecting changes in someone’s fork of the document.<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">Best Regards,<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">Rob<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div><div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif; background: white;"><b><span style="font-size: 11pt; color: rgb(24, 55, 106);">Dr. Robert Lee MEng PhD</span></b><span style="color: rgb(32, 31, 30);"><o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif; background: white;"><span style="font-size: 11pt; color: rgb(24, 55, 106); background: white;">Senior Software Engineer with Cryptography SME</span><span style="color: rgb(32, 31, 30);"><o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif; background: white;"><span style=""><a href="http://www.globalsign.co.uk/" target="_blank" style="color: rgb(5, 99, 193); text-decoration: underline;"><span style="font-size: 11pt;">www.globalsign.co.uk</span></a></span><span style="font-size: 11pt; color: rgb(24, 55, 106);">|</span><span style=""><a href="http://www.globalsign.eu/" target="_blank" style="color: rgb(5, 99, 193); text-decoration: underline;"><span style="font-size: 11pt; color: rgb(11, 76, 180);">www.globalsign.eu</span></a></span><span style="color: rgb(32, 31, 30);"><o:p></o:p></span></div></div></div><div style="margin: 0cm; font-size: 12pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">Smcwg-public mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="mailto:Smcwg-public@cabforum.org" style="color: rgb(5, 99, 193); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Smcwg-public@cabforum.org</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="https://lists.cabforum.org/mailman/listinfo/smcwg-public" style="color: rgb(5, 99, 193); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">https://lists.cabforum.org/mailman/listinfo/smcwg-public</a></div></blockquote></div><br></div></body></html>